Training (2012)

With all PHP topics, nothing counts more than their practical application.
This is why thePHP.cc once again offers a highly interactive and practical
training right before ConFoo. Based on their own specific needs and
questions, the attendees decide on the topics that are covered. They
experience the development of new code at first hand, following their own
agendas rather than those of the three trainers.

With a twinkle in their eyes and a dash of fun, Sebastian Bergmann, Arne
Blankerts, and Stefan Priebsch explain development methods and tools,
present trends and concepts, and perform joint code review sessions. This
is efficient learning in a relaxed environment.

Topics covered include development best practices, object-oriented
programming, design patterns, web application architecture, security,
software quality and testing. All three trainers will be present at all
times, so attendees have an unparalleled level of access to top-notch PHP
expertise.

This training gives answers to every question you ever had about PHP and
software development with PHP. Attendees should bring their own code and
as many questions as they have.

Take advantage of this uniquely intense form of knowledge transfer at an
unbeatable cost-to-benefit ratio!

The Symfony2 framework adoption is becoming bigger and bigger and most of Symfony developers would like to know more about advanced features of the framework. This special Confoo workshop will help you dive deeply in advanced features and best practices you probably don't master. We will especially focus on demystifiing and experimenting the famous dependency injection principle and the associated Container object. Then, we will have a closer look at the security layer that provides authentication and authorization mechanisms with a fined grained ACL system. This session will also introduce some of the key concepts of HTTP caching using a reverse proxy like Varnish and handling Edge Side Includes. Of course, you will discover how to test the application to ensure its reliability and long lasting. Depending on the remaining time at our disposal, we will focus on some other cool features of the framework like forms handling, validation, internationalization, Twig extension or database intregration. To make this workshop the most efficient and practical for every one, we will hack on an existing Symfony2 application instead of starting from scratch. Don't forget to bring your laptop with you!

The advancement of PHP and its available frameworks can now enable us to create stable and secure applications. But many details and good practices measures must be implemented in order to procude a secure application in the end. As it is often the case, we forget and the solution is not that simple.

This workshop will lead the participant to understand the different methods of secure programming in PHP and also in Drupal, Symfony and Zend. All of this workshop’s information will be transmitted with an emphasis on the impact of an attack, because each risk will be demonstrated with a simulation. The final goal is to learn how to break and fix a PHP Web application in today’s reality.

The target attendee is a PHP developer that is not already aware of security methods and/or want to have an overview of the attacker’s perspective.